Infrastructure Security Engineer L2 - Palo Alto Cloud Operations

Position summary

Gruve is hiring an Infrastructure Security Engineer L2 with strong experience in Palo Alto next-generation firewalls and cloud operations. This role focuses on implementing, administering, and supporting firewall solutions across enterprise and cloud environments, while ensuring stable and secure network infrastructure for critical business functions.

Key responsibilities

• Deliver L2 support for Palo Alto NGFW environments, including incident response, troubleshooting, and issue closure.
• Handle routine firewall activities such as policy updates, NAT changes, and VPN administration.
• Investigate and resolve advanced network and security issues across on-premises and cloud platforms such as AWS, Azure, GCP, and OCI.
• Coordinate with vendor TAC teams for complex or high-priority incidents.
• Configure and maintain IPSec VPNs, remote access VPNs, and clientless VPN access.
• Manage security rules, NAT policies, and ACLs.
• Use Palo Alto Panorama for centralized administration, including templates, device groups, log collectors, and policy rollout.
• Support NGFW capabilities such as threat prevention, URL filtering, content filtering, DLP, and User-ID.
• Contribute to firewall migration efforts, including transitions from Cisco ASA to Palo Alto.
• Assist with IDS/IPS monitoring and administration, including tuning and alert handling.
• Follow ITIL-aligned change management practices for production changes.
• Create and update technical documentation such as HLDs, LLDs, SOPs, and knowledge base articles.
• Carry out security reviews, identify gaps, and recommend improvements to the security architecture.
• Work with L3 teams and business stakeholders to resolve complex issues and improve designs.
• Provide inputs for broader network security strategy, transformation initiatives, and infrastructure planning.

Technical requirements

• Strong practical experience with Palo Alto NGFW and PAN-OS advanced features.
• Working knowledge of Palo Alto Panorama, including templates, device groups, and log collectors.
• Exposure to Cisco ASA firewalls and firewall migration projects.
• Solid understanding of network security fundamentals.
• Good grasp of OSI model concepts, TCP/IP protocols, and routing and switching basics.
• Hands-on capability with IPSec VPN setup and troubleshooting.
• Ability to manage NAT, ACLs, and security policies.
• Awareness of cloud security networking in AWS, Azure, GCP, and OCI.
• Understanding of IDS/IPS platforms and threat prevention techniques.

Eligibility and qualifications

Applicants should hold a B.E./B.Tech in CSE, IT, or ECE, or an MCA / M.Sc. in Computer Science. The employer is also open to any graduate for eligibility consideration. A minimum of 5 years of experience in network security and firewall administration is required. Candidates should also bring strong analytical, problem-solving, and communication skills.

Preferred qualifications

• PCNSE certification is preferred.
• CCNP Security or an equivalent certification is an added advantage.
• Experience with enterprise data center and cloud security deployments is desirable.

Additional information

Location: Navi Mumbai, India.